Privacy Policy

Introduction

next1221 ("we", "us", "our", "the Platform") is committed to protecting and respecting the privacy of all individuals who use our online sports betting and live casino services at next1221.cam (the "Platform"). This Privacy Policy ("Policy") sets out how we collect, use, store, disclose, and safeguard your personal data when you register an account, make a deposit, place a bet, or otherwise interact with any feature or service we offer.

This Policy applies to all users of the next1221 platform, including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other parts of Malaysia, as well as any other jurisdiction from which our services are lawfully accessible.

By accessing the next1221 platform or creating an account, you acknowledge that you have read, understood, and agree to the data practices described in this Policy. If you do not agree, you must not use the Platform. This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, phone number, IP address, payment details, and account activity.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, consultation, use, transmission, restriction, erasure, or destruction.
• "Data Controller" means next1221, which determines the purposes and means of processing Personal Data collected via the Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller under a written agreement.
• "Cookies" means small text files placed on your device by the Platform to facilitate functionality, remember preferences, and support analytics.
• "KYC Data" means identity and verification documentation collected as part of Know Your Customer compliance obligations, such as government-issued ID and proof of address.
• "User" or "you" means the individual registering for or using an account on the next1221 Platform.

Data We Collect

next1221 collects Personal Data through multiple channels, including account registration, financial transactions, platform interactions, and communications with our support team. The categories of data we collect are set out below.

3.1 Data Collected Automatically

When you access the next1221 platform, certain technical information is collected automatically through our server logs and analytics systems. This includes your IP address, referring URL, pages visited, and session duration. This data is used to maintain platform security, detect fraud, and improve user experience.

3.2 Data You Provide Voluntarily

Information you directly submit — such as your registration details, deposit instructions, support enquiries, and preferences — is collected and processed as described in this Policy. We rely on you to ensure that information provided is accurate and kept up to date.

Data Processing

We process your Personal Data for the following specific purposes. Where applicable, the legal basis for each processing activity is identified in Section 5 of this Policy.

• Account Administration: Creating, maintaining, and closing your account; processing login authentication; applying account restrictions where required.
• Transaction Processing: Facilitating deposits via Touch 'n Go eWallet, Boost, GrabPay, Maybank FPX, CIMB, Public Bank, Hong Leong Bank, DuitNow, and USDT TRC20; processing withdrawal requests to verified payment accounts.
• Identity Verification (KYC): Verifying your identity and age in compliance with applicable anti-money laundering and responsible gambling obligations.
• Fraud Prevention: Monitoring account activity for indicators of fraud, collusion, money laundering, and other prohibited conduct.
• Regulatory Compliance: Meeting obligations imposed by applicable gaming regulation, financial crime prevention laws, and data protection frameworks.
• Customer Support: Responding to and resolving enquiries, complaints, and disputes submitted via live chat or email.
• Platform Improvement: Analysing aggregated behavioural data to identify usability issues and optimise the platform experience for Malaysian players.
• Marketing Communications: Sending promotional offers, bonus notifications, and product updates to users who have given explicit consent to receive them.
• Responsible Gambling Monitoring: Identifying patterns of behaviour that may indicate problem gambling and triggering appropriate safeguards in line with our Responsible Gambling Policy.

Legal Basis for Processing

next1221 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity in question:

• Contractual Necessity: Processing required to perform the contract between you and next1221 — including account creation, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC verification, anti-money laundering obligations, and responsible gambling mandates.
• Legitimate Interests: Processing carried out for our legitimate business interests, including fraud prevention, platform security, and product analytics, where these interests are not overridden by your rights.
• Consent: Processing of data for optional purposes — such as marketing communications — where you have given free, specific, informed, and unambiguous consent. You may withdraw this consent at any time.

Data Sharing

next1221 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We may share your data in the following limited circumstances:

• Payment Service Providers: We share necessary financial data with payment processors operating our supported methods (Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, and cryptocurrency networks) to facilitate deposits and withdrawals.
• Identity Verification Providers: KYC data is shared with regulated identity verification partners for the purpose of age and identity checks only.
• Game Content Providers: Certain platform interaction data may be shared with our licensed game studio partners to support game delivery, technical support, and regulatory compliance.
• Fraud Prevention Services: Technical data including IP addresses and device fingerprints may be shared with fraud detection systems to protect the integrity of the platform.
• Regulatory and Legal Authorities: We may disclose Personal Data to competent authorities when required by law, court order, or regulatory direction, without prior notice to the user where legally required.
• Corporate Transactions: In the event of a merger, acquisition, or transfer of business assets, Personal Data may be transferred to the acquiring entity subject to equivalent privacy protections.

All third-party Data Processors engaged by next1221 are bound by contractual data processing agreements that require them to maintain appropriate security standards and to process Personal Data only as instructed by next1221.

Data Retention

We retain Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, to meet anti-money laundering and regulatory record-keeping requirements.
• Transaction Records: Financial transaction data is retained for a minimum of seven (7) years in line with standard financial record-keeping obligations.
• KYC Documents: Retained for the period required by applicable identity verification and anti-money laundering regulations, typically five (5) years from the end of the customer relationship.
• Support Communications: Retained for three (3) years from the date of the last interaction, or longer where a dispute or regulatory matter is ongoing.
• Marketing Consent Records: Retained for the duration of the consent period and for twelve (12) months thereafter as evidence of consent.
• Technical and Log Data: Retained for up to twelve (12) months for security and fraud analysis purposes.

Security Measures

next1221 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• AES-256 encryption for Personal Data stored in our databases.
• Multi-factor authentication options for user account access.
• Role-based access controls limiting employee access to Personal Data on a need-to-know basis.
• Regular penetration testing and vulnerability scanning of our platform infrastructure.
• Automated anomaly detection systems monitoring for unusual login activity, transaction patterns, and data access events.
• Incident response procedures to detect, report, and address data breaches in a timely manner.

While we implement robust security measures, no method of internet transmission or electronic storage is completely impenetrable. In the event of a data breach affecting your rights and freedoms, we will notify you promptly in accordance with applicable legal requirements.

Cookies & Tracking Technologies

next1221 uses cookies and similar tracking technologies to operate the platform, maintain session state, detect fraud, and understand how users interact with our services. We do not deploy third-party advertising tracking cookies.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without impairing core functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and game lobby configurations to personalise your experience.
• Analytics Cookies: Collect aggregated, anonymised data about page visits, session durations, and feature usage. Used to identify performance issues and improve the platform experience.
• Fraud Prevention Cookies: Assist in identifying and preventing fraudulent activity by associating device identifiers with known risk indicators.

9.2 Managing Your Cookie Preferences

You may manage non-essential cookie preferences through your account settings or your browser's cookie controls. Please note that disabling certain cookies may affect the functionality of the next1221 platform. Strictly necessary cookies cannot be disabled through these controls.

User Rights

Subject to applicable law and certain conditions, you have the following rights in relation to the Personal Data we hold about you. To exercise any of these rights, please contact our support team via live chat or email.

We aim to respond to all data rights requests within 30 days of receipt. In complex cases, this period may be extended by up to two additional months, in which case we will notify you within the initial 30-day window. There is no charge for reasonable requests. We may decline requests that are manifestly unfounded, excessive, or where fulfilling the request would conflict with our legal obligations.

Minors & Age Policy

The next1221 platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect or process Personal Data from individuals under the age of 21. Registration by minors is prohibited, and we apply age verification procedures to enforce this requirement.

If we become aware that we have inadvertently collected Personal Data from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered on our platform, please contact us immediately via live chat or at [email protected].

International Data Transfers

As an online platform serving players across Malaysia and operating with international technology and payment partners, certain Personal Data may be transferred to, stored in, or processed in jurisdictions outside of Malaysia. These may include server locations in data centres operated by reputable cloud infrastructure providers.

Where Personal Data is transferred internationally, next1221 ensures that appropriate safeguards are in place to maintain a level of protection equivalent to that applied within Malaysia. Such safeguards may include contractual data protection clauses, adequacy decisions, or equivalent protective mechanisms.

By using the next1221 platform, you acknowledge and consent to the transfer of your Personal Data as described in this section, subject to the protections outlined in this Policy.

Policy Amendments

next1221 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform functionality. When we make material changes, we will notify you via email or a prominent notice on the platform prior to the changes taking effect.

The "Effective Date" at the top of this document reflects the date of the most recent update. We encourage you to review this Policy periodically. Continued use of the Platform following notification of an updated Policy constitutes your acceptance of the revised terms.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, or if you wish to exercise any of your data rights as described in Section 10, please contact next1221 through the following channels:

• Email: [email protected] (displayed as plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the platform interface
• Subject Line: Please include "Privacy Request" or "Data Rights Request" in your message for prompt routing
• Response Time: We aim to acknowledge all privacy-related enquiries within 72 hours and resolve them within 30 days

For questions specifically related to responsible gambling data or self-exclusion requests, please visit our Responsible Gambling page. For general account and platform questions, our FAQ page covers the most common topics.